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(54) Hiding an authentication code in an electric signal 

(57) In order to hide an authentication code or sig- 
nature (101, 402, 504) in an electric signal (100, 400. 
401), which consists of data parts with a certain value, 
certain data parts are selected from the electric signal 
for processing on the basis of the contents of the 
authentication code. The value of each data part 
selected for processing is re-determined by a filter (200, 
403, 504), which uses certain other predetermined data 
parts of the electric signal as input data. For detecting 
the authentication coding, the signal is filtered with the 
same filter (403) and those data parts (406) which have 
their value unchanged after the second filtering are 
marked. The electric signal can be a file (particularly an 
image file) or a temporally continuous signal. The 
device for implementing the method comprises a mem- 
ory (501, 502) for saving the electric signal and a 
processing unit (500) for reading the data from the 
memory and for changing the value of its data parts. 
The device also comprises a filter (503). which uses the 
other data parts of the signal as input data and which 
determines the new value of the data parts selected for 
processing. The device can interact with the user (506, 
507) or it can be a sealed authentication coding circuit. 
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1 EPO 

Description 

This invention relates to adding a code indicative of 
ownership or other authentication code to an electric 
signal so as to make it difficult for outsiders to perceive 
the existence of the code and/or remove the code from 
the signal. The invention relates to both the method and 
a device for implementing the method. In this patent 
application, the signal used as an example is a two- 
dimensional image presented in electric form, particu- 
larly a still image produced by a photographic appara- 
tus. However, the invention can also be generalized to 
other signal types, as will be described in more detail 
hereinafter 

It is usually rather easy to copy and duplicate elec- 
trically presented information, which makes it more diffi- 
cult to control that copyrights are observed. According 
to international agreements, copyright to a certain 
image belongs to the producer of the image. If the pro- 
ducer saves the image in the form of an electric file in a 
computer, which is connected to a wide information net- 
work, such as internet, it is possible that another user of 
the network copies the image file and uses it in other 
contexts without paying compensation to the producer, 
who is entitled to it on the basis of the copyright If the 
producer wants to present a legal claim for compensa- 
tion, he must be able to prove that the image used else- 
where is a copy of the image produced by the person 
claiming for compensation. It would be very important 
for the producer that even after the transfer and possible 
processing measures it would be possible to find some 
information indicative of the origin of the image from the 
file transferred in electric form. However, this informa- 
tion must be so hidden that a dishonest user cannot 
remove it or even perceive its existence. 

Methods used to indicate ownership of image files 
can be divided into two main categories. In watermark 
methods, a graphic element is added to the image, 
which element can be isolated afterwards and shown as 
a graphic evidence to prove that it has been added to 
the image on purpose, and that it is not a random com- 
bination of parts of the image. In checksum methods, a 
checksum or a logical combination is calculated by a 
secret method from the bits and/or bytes used to 
present the image, and this combination is added to the 
image file as part of it The origin of the image is 
detected by calculating the same logical combination 
afterwards and comparing it to the original checksum 
contained by the file. Because only the real owner of the 
image knows the correct calculation method for the 
checksum, the probability of getting the same sum with 
a method chosen at random is smalt 
All the above mentioned methods have the following 
common objectives: 

the visual quality of the image must not suffer from 
the addition of the authentication code to the image, 
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only the producer and possibly an independent, 
reliable testing institution can check the authentica- 
tion code hidden in an image, 

5 - the authentication method must allow the use of 
many kinds of authentication codes or "signatures", 

the authentication code must remain in the image 
with a sufficient reliability, even if the image is 
io packed with the JPEG or MPEG algorithm, for 
example, and 

the authentication code must endure attempts to 
pirate the images or to cover the real origin of the 
15 image. 

In watermark methods, the graphic element used 
as a authentication code is generally called a water- 
mark or signature. One known, watermark-type method 

20 has been presented in the publication R.G. van Schyn- 
del, A.Z. Tirkel, C.F. Osborne. A Digital Watermark, Pro- 
ceedings of ICIP -94, Volume II of III, pp. 86-90, IEEE, 
Austin, Texas, 1994. For other publications dealing with 
prior art methods for authentication coding of images, 

25 please see the reference list at the end of the descrip- 
tive part of this application. Generally in the prior art 
publications, the signature is converted to a virtually 
random form, the pixels of which are scattered on the 
image to be authentication coded. A disadvantage of 

30 these methods is the fact that the calculation method is 
very complicated. 

The object of this invention is to present a method 
and a device by which the above described objectives of 
the authentication coding of signals can be achieved 

35 easily and reliably. 

The objects of the invention are achieved by attach- 
ing the signature to the original signal by a filtering 
method, which changes the value of the pixels or other 
signal parts indicated by the signature in a controlled 

40 manner. 

The. method according to the invention for hiding an 
authentication code in an electric signal is characterized 
in that the value of each data part selected from the sig- 
nal for processing is specified anew by a filter, the input 

45 data of which consist of certain other predetermined 
data parts of the electric signal. 

The invention also relates to a device for imple- 
menting the method described above. The device 
according to the invention is characterized in that it com- 

50 prises a filter, and the processing unit of the device is 
arranged to re-determine the value of the data parts 
selected for processing in a manner specified by the fil- 
ter. 

For the sake of clarity, the following description will 
55 focus on the example in which the original signal is a 
two<limensional still image, and the signature is a cer- 
tain graphic element. In the method according to the 
invention, the signature is thus preferably a two-dimen- 
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sional binary array, consisting of bits which have a value 
of either 1 or 0. Shown as a bit map, a signature of this 
kind is a two-color image (typically black and white), in 
which the bits with the value 1 are shown as black pixels 
and the bits with the value 0 as white pixels or vice 5 
versa. The signature is set "on top or the original image 
as a mask at a desired point, and only the pixels which 
coincide with the 1-bits of the signature are selected 
from the original image for processing. A natural,. alter- 
native method is to select for processing only the pixels w 
which coincide with the 0-bits in the signature. A new 
value is calculated for each pixel of the original image 
being processed with a filter, the input data of which 
consist of certain pixels of the original image which do 
not belong to the pixels being processed. When a new 75 
value has been specified for all pixels being processed, 
the authentication coding has been completed. 

The filter, which is used to calculate new values for 
the pixels of the original image selected for processing, 
can be chosen rather freely. A filter which is advanta- 20 
geous with regard to the invention is such that with great 
likelihood it will alter the value of any randomly selected 
pixel, but the alteration is small. Filtering can be defined 
extensively as any operation in which the new value of a 
certain pixel or other data part is specified deterministi- 25 
cally on the basis of the values of pixels or other data 
parts which are used as input data for the filter. 

In order to perceive the authentication coding 
according to the invention, the entire authentication 
coded image is filtered pixel by pixel with the same filter 30 
which was used to implement the authentication coding. 
Because the filter is very likely to change the value of 
any pixel being processed, most of the values of the pix- 
els in the image are changed. Only the pixels which had 
their value changed according to the filter already in the 35 
authentication coding, remain unchanged. The 
observer marks those pixels in the image which have 
not changed. If these pixels form the graphic element 
used as a signature, the copyright of the image has 
been proven. *o 

In various modifications of the invention, the origi- 
nal image can be processed in many ways before the 
signature is added to it. One advantageous method is to 
use a known transformation, the reverse transformation 
of which is known, to process the original image. The 45 
signature is added to the transformed image with the fil- 
tering method described above, and the image thus 
received is reversely transformed back to the original 
form. The signature can also be oversampled before it is 
added to the original or transformed image, which in so 
practice means that the signature is duplicated and 
added at several positions on the same image. 

In the following, the invention will be described in 
more detail with reference to the preferred embodi- 
ments presented by way of example and the accompa- 55 
nying drawings, in which 

Figure 1 shows the selection of the pixels according 



to the invention, 
Figure 2 shows a filter according to the invention, 

Figure 3 shows the detection of the authentication 
coding according to the invention. 

Figure 4 shows the proceeding of an embodiment of 
the invention, and 

Figure 5 shows a device according to one embodi- 
ment of the invention. 

Figure 1 shows a simple digital image 100, but for 
the sake of clarity, the color of its pixels is not shown in 
Figure 1, and a simple binary signature 101, in which 
the 1 -pixels are shown black and the 0-pixels white. The 
digital image 100 has M x N pixels, which are divided 
into numbered columns and lines (here M = 12 and N = 
15). The value of each pixel is generally an 8-bit byte or 
a 16-bit pair of bytes. A real digital image to be authen- 
tication coded typically has hundreds of thousands or 
millions of pixels, A real signature is generally also 
much larger and more complicated than the example in 
Figure 1. The size of the signature is generally H x K 
pixels (here H = 5 and K = 7). So as to make the signa- 
ture fit into the image in its entirety, its size can be lim- 
ited as H < M and K < N. 

In authentication coding according to the simple 
embodiment of the invention, the person who is carrying 
out the coding selects from the original image 100 a 
location in which the signature 101 is to be placed. It is 
advantageous to have the location selected freely, 
because then the potential image pirate will not know 
where to look for the signature in the image. The loca- 
tion is preferably indicated as the coordinates of the 
pixel on which the pixel number (1,1) of the signature 
hits. Let us assume that the person who is carrying out 
the coding selects the location (3,3). In the example of 
the figure, the pixels of the original image on which the 
1 -pixels of the signature hit are selected for processing. 
In Figure 1, these pixels of the original image are 
marked with x. 

Each pixel of the original image selected for 
processing is processed separately by a filter, the 
detailed implementation of which can be freely chosen 
by the person who is carrying out the authentication 
coding. The only limitation set by the invention for the fil- 
ter is that it must not use any of the selected pixels as 
input data. Thus the implementation of the filter is some- 
what dependent on how the pixels 1 and 0 are divided in 
the signature. From Figure 1 it can be seen that the sig- 
nature used as an example does not contain adjacent or . 
diagonally adjacent 1-bits, and thus the filter can use as 
input data for the filtering of a certain pixel all the eight 
pixels surrounding the pixel to be filtered, for example. 
Figure 2 shows a diagram of a filter in which the filtered 
value of the pixel x marked with diagonal lines is the 
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same as the mean value of all the eight pixels surround- 
ing it. This filter is very suitable for a case like the one 
shown in Figure 1 . 

Because the original image is typically a photo- 
graph-type image, in which many adjacent pixels are s 
very unlikely to have exactly the same value, it is almost 
certain that a filter like the one shown in Figure 2 will 
change the value of the pixel selected. On the other 
hand, radical changes of the pixel value on a length of a 
few pixels are rare, and so the filter shown in Figure 2 is w 
likely to change the value of the pixel only a little. Both 
of these are advantageous features with regard to 
authentication coding. When all the pixels of the original 
image selected for processing on the basis of the signa- 
ture have been separately filtered with the chosen filter, 15 
the authentication coding according to the simple 
embodiment of the invention has been completed. If any 
of the pixels selected for processing had been situated 
very near the edge of the image, the window 200 depict- 
ing the selection of the input data had been located 20 
partly outside the image. For cases like this it is possible 
to define a so called wrap-around protocol, according to 
which transition from the pixel at the edge of the image 
to the area outside the image is interpreted as transition 
to a pixel at the opposite edge of the image (in other 25 
words, the location of the pixels in the columns is 
defined as modulo the number of columns and similarly 
in the rows modulo the number of rows). 

Figure 3 shows the detection of authentication cod- 
ing in an image which has been authentication coded by 30 
a method according to the simple embodiment of the 
invention described above. The digital image 300 is fil- 
tered pixel by pixel with the same filter which was used 
to hide the signature in the original image. The frame 
301 depicts the location of the selection frame of the fil- 35 
ter input data at a certain pixel, and the arrows proceed- 
ing pixel by pixel describe the moving of the frame pixel 
by pixel forward, until the whole image has been filtered. 
The value of most pixels will change in the filtering, as 
has been stated.above. However, the value of those pix- 40 
els which have already been filtered when the signature 
was hidden, does not change, because filtering on the 
basis of the same input data pixels gives the same 
result both during the hiding and discovery of the signa- 
ture. In addition, it can be assumed that there are some 45 
pixels in the image which happen to have such a value 
that it does not change during the filtering. On the basis 
of the filtering results, a so called detection image is 
formed, in which the pixels which remained unchanged 
in the filtering are clearly distinguished from those which so 
had their value changed. In Figure 3, for example, the 
first mentioned pixels are shown black and all other pix- 
els white. The pixels at the points (2,1) and (1,N) of the 
image are randomly found pixels and other pixels 
marked black belong to the signature. 55 

If the signature is a certain regular and easily rec- 
ognizable graphic element and if there is a relatively 
small amount of randomly found "non-changing" pixels, 



6 

the signature can generally be clearly seen with the 
naked eye in the detection image, when the whole 
image has been filtered. If one of these conditions is not 
met, the signature can be searched by statistical meth- 
ods from the detection image. In practice, this is gener- 
ally most easily implemented by forming a convolution 
of the signature and the detection image, in which the 
known signature is compared to each of its possible 
locations on the detection image, and a characteristic is 
calculated to describe how well the pixel content of the 
signature corresponds to the pixel content of the detec- 
tion image in each possible location. If the highest value 
of the convolution shows that at the most suitable loca- 
tion over 90% of the pixels have the same value as the 
corresponding pixels of the detection image, it is rela- 
tively certain that the signature has originally been 
placed at the location in question. It is not possible to 
demand that the signature and the suspected location 
on the detection image are fully identical, if there is the 
possibility that a packing algorithm or some other factor 
causing loss of information has changed the contents of 
the image after the authentication coding. 

In the simple embodiment of the invention 
described above the person who performs the coding 
can choose the signature, its location on the original 
image and the filter by which both the authentication 
coding and its detection is performed. Because the 
number of possible signatures is almost limitless when 
large images are processed and because there are 
many possible filters, without knowledge of the form of 
the signature and the filter used it is difficult even to 
know whether a certain image has been authentication 
coded or not, and to discover and remove the signature 
used in the coding is even more difficult. However, it is 
possible to think of a situation in which an image pirate 
gets hold of both the original, uncoded image and its 
authentication coded version. If the difference of these 
images is calculated by pixels, the signature becomes 
visible, because the authentication coding has only 
changed the value of the pixels selected on the basis of 
the signature, while other pixels have remained 
unchanged. When the signature has been found, the 
image pirate can perform a statistical analysis of how 
the values of the original image have been changed in 
the authentication coding, in which case it may even be 
possible to find out what kind of a filter was used in the 
coding. On the basis of this information, it is also possi- 
ble to try to break the authentication coding of other 
images produced by the same producer. 

In order to eliminate this disadvantage, another 
embodiment of the invention has been developed, and it 
will be described in the following with reference to Fig- 
ure 4. At the beginning of the coding, the original image 
400 is transformed into another form 401 by the trans- 
formation T, the reverse transformation T 1 of which is 
known by the person who performs the authentication 
coding. The signature 402 is added to the transformed 
image by using the filter 403 in the same way as has 
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been described above. The transformed image, to 
which the signature has been added by filtering, is 
reversely transformed into the image 404, which other- 
wise corresponds to the original image 400 but in addi- 
tion contains the signature in a form which is the result 
of the filtering 403 and the reverse transformation T 1 . 
When observed with the naked eye, it is usually impos- 
sible to distinguish the image 404 from the original 
image 400. 

In order to detect the authentication coding, the 
image 404 is again transformed with the transformation 
T, resulting in the image 405. When it is filtered pixel by 
pixel with the filter 403, and all the pixels with an 
unchanged value are marked, the result is the detection 
image 406, from which it is further possible either to vis- 
ually perceive or by statistical methods to discover the 
signature 402. 

The transformation T can be freely chosen by the 
person who performs the authentication coding, as long 
as it is deterministic and its reverse transformation T 1 is 
known. In this embodiment the person performing the 
authentication coding can use, in addition to the signa- 
ture, its location and the filter mentioned above, a fourth 
factor which can be freely chosen and which makes an 
unauthorized detection of the signature and thereby the 
possibility of breaking the authentication code even 
more difficult. One known transformation T, which can 
be used as shown in Figure 4, is a discrete cosine trans- 
formation. Another possible transformation is the divi- 
sion of the image (virtually randomly, for example) into 
two or more partial images, whereby the signature is 
added to only one of them or in which partial images the 
signature is added to different locations. The division of 
the image into partial images can take place by "cutting" 
part of the pixels to different partial images or by divid- 
ing the value of each pixel into parts (for example, the 
four most significant bits of each pixel into the first par- 
tial image and the rest of the bits into the second partial 
image) or in other ways. A person skilled in the art can 
easily present many suitable transformations. There are 
many algorithms and electric circuits on the market, by 
which various transformations and reverse transforma- 
tions can be quickly and easily calculated for the 
images, and thus the more advanced embodiment of 
the invention does not make the implementation of the 
invention substantially more complicated. 

One variation, which makes the authentication cod- 
ing according to the invention more resistive against the 
disappearance of information caused by the packing 
algorithms of the image files, is oversampling of the sig- 
nature before it is added by filtering to the original image 
or the transformed image obtained by transformation. 
Oversampling means increasing the pixel division of the 
signature. If a two-dimensional signature is double over- 
sampled both vertically and horizontally, each original 
pixel of the signature become four pixels with equal 
value. In other words, the original signature is dupli- 
cated into four copies, which are placed on the image to 



be authentication coded regularly in relation to one 
another or even independent of one another. Thus the 
likelihood that at least one copy of the signature 
becomes clearly visible when the authentication coding 

5 is to be detected, is very high. The rate of oversampling 
can be freely chosen by the person performing the 
authentication coding. K several copies of the signature 
are added to the same image, different filters can be 
used to add each copy. Then the copy of each signature 

10 can naturally be detected only by using the same filter 
that was used to add it to the image. When several cop- 
ies are being added to the image, attention must be paid 
to avoid overlapping. 

An important place of application for authentication 

15 coding of two-dimensional images is in digital image 
archives, which are connected to Internet or such 
another general data transfer network, and from which 
the users can select and copy any image files they want. 
The keeper of the image archive can protect the images 

20 in the archive by authentication coding according to the 
invention and, for example, send a program called 
"agent" to the data network to search automatically for 
other image files and test if an authentication coding 
made by the keeper of the image archive can be found 

25 in them. If a signature is found in an image file which 
has not been legally acquired by a legal agreement from 
the keeper of the image archive, it proves that the holder 
of the file has acquired the possession of it without per- 
mission. A single image on a www home page can also 

30 be authentication coded so that its unauthorized copy- 
ing to other places in the data network could be 
detected. A browser program, which the legal owner of 
an authentication coded image or images uses to get 
other information from the data network, can be 

35 equipped with an authentication coding detection part, 
to which the user inputs information of the signature, fil- 
ter and possible transformation used. Thus the owner of 
a certain image or images can - when finding a familiar 
image in the network - by pressing a key or clicking the 

40 mouse examine if it contains the owner's signature. 

The above description concerned the application of 
the invention to the authentication coding of two-dimen- 
sional digital images shown in bit-map form. However, 
the invention can be extended to the processing of 

45 many types of electric signals. A video performance is a 
series of two-dimensional images shown rapidly in suc- 
cession, and any one of them, or each of them, can be 
supplied with a signature as described above. On the 
other hand, a video performance can utilize the time 

so dimension by making the filter used for authentication 
coding and its detection three-dimensional, whereby it 
uses certain pixels contained by two or more consecu- 
tive images, for example, as input data. The signal to be 
authentication coded and the signature and filter used in 

55 the authentication coding can also be one-dimensional: 
for example, a digital telephone signal, which is a series 
of temporally consecutive bytes. In this case, the signa- 
ture can be a certain line of bits, of which the bytes cor- 
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responding to 1-bits (alternatively 0-bits) from a certain, 
regularly repeating sequence of telephone signal (for 
example, a speech frame corresponding to 20 ms of 
speech time) are selected for processing. The term 
"data part" mentioned above in connection with the gen- 5 
eral description of the invention means all the parts of 
the signal shown in electric form which can be identified 
and selected for processing as described above and the 
value of which can be changed by means of a certain f il- 
ter - w 

The authentication coding of audio and video sig- 
nals or other temporally continuous signals, in particu- 
lar, shows that the signal need not be a certain file with 
limited size, as in the authentication coding of still 
images. By the method according to the invention, the is 
authentication coding can be added to a temporally con- 
tinuous signal at certain regular or irregular intervals. 
This property of the invention can be utilized for identify- 
ing an electric signal produced by a certain device (tele- 
phone, video camera, tape recorder etc.): the device 20 
can contain a sealed authentication coding circuit, to 
which a certain signature, a certain filter and when 
required, a certain transformation and its reverse trans- 
formation, characteristic of this device, have been per- 
manently saved. At regular or irregular intervals, the 25 
authentication coding circuit separates a cycle from the 
sequence generated by the device, to which sequence 
it hides the signature in a manner according to the 
invention. Afterwards, the signal generated by the 
device can be sent to be analyzed by such a trusted per- 30 
son or persons who know the information saved in the 
sealed authentication coding circuit. By means of this 
information, the trusted person can prove which device 
was used to produce the signal. 

Figure 5 shows a diagram of a device for imple- 35 
menting the method according to the invention. The 
device has a microprocessor 500, which is equipped to 
read and write images or other signals from the storage 
blocks 501 and 502 and to carry out the signal process- 
ing operations required by the invention. The microproc- 40 
essor also has a two-way data transfer connection to 
the storage blocks 503, 504 and 505. the first of which is 
intended for saving the filter used in the filtering, the 
second is intended for saving the data used as a signa- 
ture, and the third is intended for saving the transforma- 45 
Hon T and its reverse transformation. A display unit 506 
has also been connected to the microprocessor for con- 
veying information to the user, and a keyboard 507. by 
which the user can control the operation of the device. It 
this were a sealed authentication coding circuit, the pur- so 
pose of which is to operate in a certain larger device, 
certifying the origin of the information produced by the 
device, the keyboard and display would not be needed, 
and the information of the filter, signature and transfor- 
mation would be saved permanently in the storage ss 
blocks 503. 504 and 505. In this connection, sealing 
means any known arrangement by which the contents 
and operation of a certain electric circuit is protected so 



as to make unauthorized detection thereof difficult. 

The user inputs to a device according to Figure 5 
the information of the filter, signature and transformation 
wanted by using the keyboard 507 or a corresponding 
data input device. In addition, the user enters a com- 
mand, which means the authentication coding of an 
image file or another file. The file in question is then 
saved in the storage block 501 . The microprocessor 500 
reads the file to be authentication coded, transforms it 
according to the transformation T read from the storage 
block 505 and saves it in the storage block 502. It is thus 
advantageous to have two separate storage blocks 501 
and 502, because if the transformation is interrupted or 
an error occurs during the process, the entire file is not 
destroyed but its original version remains saved in the 
storage block 501. Next, the microprocessor 500 reads 
the transformed file from the storage block 502 and 
saves it back to the storage block 501 so that it changes 
the values of the pixels or other data parts in a manner 
determined by the filter read from the storage block 503. 
Finally, the microprocessor reads the file again from the 
storage block 501, reversely transforms it and saves the 
authentication coded file in the storage block 502. The 
microprocessor informs the user of a successful com- 
pletion of the authentication coding via the display 506. 

When the user uses the keyboard to enter a com- 
mand 507, meaning the detection of the authentication 
coding from the file saved in the storage block 502, the 
microprocessor reads the file, transforms it and saves 
the transformed file in the storage block 501 . In the next 
step, it reads the transformed file from the storage block . 
501 , filters it and forms a detection file in which the data 
parts which had their value unchanged during filtering, 
are marked. The detection file is saved in the storage 
block 502. The microprocessor forms a convolution of 
the detection file and signature, and saves the result in 
the storage block 501, in which result each data part of 
the detection file corresponds to an identification 
number, which depicts the suitability of the signature to 
the data part of the detection file. Finally, the microproc- 
essor informs the user by the display 506 which the larg- 
est number is. where it is located and if, judging from it. 
it is likely that the file has been found to be authentica- 
tion coded, using the signature saved in the storage 
block 504. The microprocessor can also show the 
detection file graphically to the user on the display 506, 
whereby the user can visually determine whether the 
signature has been found in the file. 

it is clear to a person skilled in the art that the 
embodiments of the invention described above are pre- 
sented by way of example only, and that it is possible to 
make obvious changes to them without departing from 
the scope defined by the claims presented hereinafter. 
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A method for hiding an authentication code (101, 
402, 504) in an electric signal (100, 400, 401), 
which consists of data parts with a certain value, in 
which method certain data parts are selected from 
the electric signal for processing on the basis of the 
contents of the authentication code, characterized 
in that the value of each data part selected for 
processing is re-determined by a filter (200, 403, 
503), which uses certain other, predetermined data 
parts of the electric signal as input data. 

A method according to Claim 1 , characterized in 
that said electric signal (100, 400, 401) is a file and 
its data parts are bytes. 

A method according to Claim 2, characterized in 
that said file is an image file and its bytes depict the 
pixels of the image. 

A method according to Claim 1 , characterized in 
that said electric signal (100, 400, 401) is a tempo- 
rally continuous signal and its data parts are bytes, 
whereby a certain temporal period is separated 
from the temporally continuous signal and the 
authentication code is hidden in said separated sig- 
nal period. 

A method according to Claim 4, characterized in 
that the authentication code is repeatedly hidden in 
the same temporally continuous signal. 

A method according to Claim 1 , characterized in 
that a deterministic transformation (T, 505) is also 
carried out on said electric signal before the data 
parts are selected for processing, and a reverse 
transformation (T 1 . 505) of said deterministic trans- 
formation is carried out on the transformed electric 
signal after the value of each data part selected for 
processing has been specified anew. 

A method for detecting the authentication coding 
from an electric signal, which consists of data parts 
with a certain value, characterized in that in it 

the electric signal is filtered with a predeter- 
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mined filter (403), 

the data parts (406) which have their value 
unchanged during filtering are marked, and 
the marked data parts are compared to a pre- 
determined signature (402). 



5 



8. A method according to Claim 7, characterized in 
that a predetermined deterministic transformation 
(T) is also carried out on said electric signal before 



9. A device for hiding the authentication code in an 
electric signal, which consists of data parts with a 
certain value, which device comprises a memory 
(501, 502) for saving said electric signal, and a is 
processing unit (500) for reading the electric signal 
from the memory and for changing the value of its 
data parts, characterized in that it comprises a fil- 
ter (503), and said processing unit is arranged to re- 
determine the value of the data parts selected for 20 
processing in a manner specified by said filter. 

10. A device for detecting the authentication coding 
from an electric signal, which consists of data parts 
with a certain value, which device comprise a mem- 25 
ory (501, 502) for saving the electric signal and a 
processing unit (500) for reading the electric signal 
from the memory and for changing the value of its 
data parts, characterized in that it comprises a fil- 
ter (503), and said processing unit is arranged to re- 30 
determine the value of the data parts of the signal in 

a manner specified by said filter and to save the 
information of those data parts which have their 
value unchanged during filtering. 



1 1. A device according to Claim 9 or 10, characterized 
in that it also comprises an input device (507) for 
receiving the input data from the user and an output 
device (506) for conveying information about the 



12. Adevice according to Claim 9 or 10. characterized 
in that it is a sealed authentication coding circuit. 



it is filtered. 



10 
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operation to the user. 
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(57) In order to hide an authentication code or sig- 
nature (101, 402, 504) in an electric signal (100, 400, 
401), which consists of data parts with a certain value, 
certain data parts are selected from the electric signal 
for processing on the basis of the contents of the 
authentication code. The value of each data part 
selected for processing is re-determined by a filter (200, 
403, 504), which uses certain other predetermined data 
parts of the electric signal as input data. For detecting 
the authentication coding, the signal is filtered with the 
same filter (403) and those data parts (406) which have 
their value unchanged after the second filtering are 
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marked. The electric signal can be a file (particularly an 
image file) or a temporally continuous signal. The 
device for implementing the method comprises a mem- 
ory (501, 502) for saving the electric signal and a 
processing unit (500) for reading the data from the 
memory and for changing the value of its data parts. 
The device also comprises a filter (503), which uses the 
other data parts of the signal as input data and which 
determines the new value of the data parts selected for 
processing. The device can interact with the user (506, 
507) or it can be a sealed authentication coding circuit. 
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